Bitte Logfile auswertug! Virus oder Trojaner??!

kaltron

Datei ICQ_Status_Checker.exe empfangen 2009.09.23 22:14:23 (UTC)
Status: Beendet
Ergebnis: 12/41 (29.27%)
Laden der Serverinformationen...


Antivirus Version letzte aktualisierung Ergebnis
a-squared 4.5.0.24 2009.09.23 Virus.Win32.Icqpass!IK
AhnLab-V3 5.0.0.2 2009.09.23 -
AntiVir 7.9.1.23 2009.09.23 -
Antiy-AVL 2.0.3.7 2009.09.23 -
Authentium 5.1.2.4 2009.09.23 -
Avast 4.8.1351.0 2009.09.23 -
AVG 8.5.0.412 2009.09.23 -
BitDefender 7.2 2009.09.23 Trojan.Generic.658167
CAT-QuickHeal 10.00 2009.09.23 -
ClamAV 0.94.1 2009.09.23 -
Comodo 2417 2009.09.23 UnclassifiedMalware
DrWeb 5.0.0.12182 2009.09.23 -
eSafe 7.0.17.0 2009.09.23 Suspicious File
eTrust-Vet 31.6.6757 2009.09.23 -
F-Prot 4.5.1.85 2009.09.23 -
F-Secure 8.0.14470.0 2009.09.23 -
Fortinet 3.120.0.0 2009.09.23 -
GData 19 2009.09.23 Trojan.Generic.658167
Ikarus T3.1.1.72.0 2009.09.23 Virus.Win32.Icqpass
Jiangmin 11.0.800 2009.09.23 -
K7AntiVirus 7.10.852 2009.09.23 -
Kaspersky 7.0.0.125 2009.09.23 -
McAfee 5750 2009.09.23 -
McAfee+Artemis 5750 2009.09.23 Artemis!788792FF216C
McAfee-GW-Edition 6.8.5 2009.09.23 Heuristic.LooksLike.Win32.Suspicious.B!85
Microsoft 1.5005 2009.09.23 -
NOD32 4451 2009.09.23 -
Norman 6.01.09 2009.09.23 W32/Delf.BUMR
nProtect 2009.1.8.0 2009.09.23 -
Panda 10.0.2.2 2009.09.23 Generic Trojan
PCTools 4.4.2.0 2009.09.23 -
Prevx 3.0 2009.09.24 Medium Risk Malware
Rising 21.48.24.00 2009.09.23 -
Sophos 4.45.0 2009.09.23 -
Sunbelt 3.2.1858.2 2009.09.23 -
Symantec 1.4.4.12 2009.09.23 Trojan Horse
TheHacker 6.5.0.2.015 2009.09.22 -
TrendMicro 8.950.0.1094 2009.09.23 -
VBA32 3.12.10.10 2009.09.23 -
ViRobot 2009.9.23.1950 2009.09.23 -
VirusBuster 4.6.5.0 2009.09.23 -
weitere Informationen
File size: 115200 bytes
MD5...: 788792ff216c7fdc658af6913e0466ae
SHA1..: 5634a98654f82dd722f4e74762f30faedaf16662
SHA256: 40a5a4f5f3e06c3364a7b58242a8652f9879ed89d85761729088439f40a1612b
ssdeep: 3072:UZ0XE+cr7FJ+iqPPsLZUdY8+K6ilG/aUJcU17c+2e:UZ00XrlqPPpY8kUb2
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x52001
timedatestamp.....: 0x461278ef (Tue Apr 03 15:55:27 2007)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2d000 0xa800 7.99 b43d62bd9eefc4cc157dc433cb95816e
.data 0x2e000 0x2000 0x200 0.58 8968c4e30fdc2cd1e3ac0ba01f35cef4
.rsrc 0x30000 0x22000 0xd200 7.98 95c68b27ec9b69e702ea637010fe7260
.aspack 0x52000 0x4000 0x4000 5.20 aba57e3b994463232b065a0e9679c520
.adata 0x56000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 2 imports )
> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA
> msvbvm60.dll: __vbaVarTstGt

( 0 exports )
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck:
publisher....: murb
copyright....: Copyright (C) 2007 by murb
product......: ICQ Status Checker
description..: ICQ Status Checker 1.2
original name: ICQ Status Checker.exe
internal name: ICQ Status Checker
file version.: 1.2
comments.....: Freeware (www.murb.com _ www.icq-tools.de)
signers......: -
signing date.: -
verified.....: Unsigned
<a href='http://info.prevx.com/aboutprogramtext.asp?PX5=AA341EE20098BD36C27401A36855630024F7CEC2' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=AA341EE20098BD36C27401A36855630024F7CEC2</a>
packers (Kaspersky): ASPack
packers (F-Prot): Aspack